如何保護網上個人隱私 How to keep your details safe on the internet
There are no equivalents to highway codes, nutritional guidelines and movie-style ratings systems to help people make safe choices on the internet.
人們要在網際網路上做出安全的選擇，沒有像現實生活中交通法規、營養指南以及電影風格評級制度之類的東西作為參考。
Many consumers feel hopeless and helpless, as retailers, healthcare providers and governments lose millions of records and hackers steal their identities to make fraudulent transactions. Senior businesspeople may be among the most at risk because of their wealth or because they may have access to commercially sensitive material.
許多消費者感到絕望和無助，因為零售商、醫療服務提供者及政府丟失了數以百萬計的記錄，而黑客竊取消費者的身份進行欺詐交易。高層商界人士屬於風險最高的人士行列，原因在於他們的財富，或是因為他們可能有獲得商業敏感材料的途徑。
Current forms of cyber security protection, particularly for individuals, are not keeping up with wily hackers, who are able to change tactics quickly.
當前的網路安全保護形式（尤其對個人來說）跟不上能夠快速改變策略的狡詐黑客。
Jay Kaplan, chief executive of Synack, a security start-up, says people should prioritise monitoring how their information is being used, because they have to assume it has been stolen by someone.
初創的網路安全企業Synack執行長傑伊慍湓灦(Jay Kaplan)說，人們應該著重監測他們的資訊是如何被使用的，因為他們不得不假定自己的資訊已經被別人竊取了。
“It is inevitable,” he says. “Everyone needs to take a stance that eventually their information will be compromised unless they live under a rock and never share electronically. Even then, it is impossible, given they do things such as file tax returns.”
“這是不可避免的，”他說。“每個人都需要認識到，他們的資訊終究都會受到危害，除非他們生活在岩石下面，而且從不使用電子方式分享資訊。即便這樣，資訊洩露也不可能避免，因為他們要做納稅申報之類的事情。”
Regularly checking your personal credit rating is the best way to keep track of financial fraud, but it is harder to monitor how hackers are using healthcare data or how identification such as social security numbers in the US or national insurance numbers in the UK, that are used to access myriad sensitive accounts, may be being misused.
定期檢查自己的個人信用評級是發現金融欺詐的最好方法，但要監控黑客如何利用醫療資料或者那些用來訪問大量敏感賬戶的身份資訊（如美國的社會保障號碼或英國的國民保險號碼）如何被濫用要困難得多。
Mr Kaplan says companies’ and government agencies’ dependence on this form of identification and other easily discoverable identifiers such as names, addresses and dates of birth, is archaic and no longer secure.
卡普蘭說，企業及政府機構對這種身份識別形式以及其他容易被發現的識別資訊（如名字、地址和出生日期）的依賴是過時的、不安全的。
He recommends companies come up with a more secure authentication system and that consumers use two-factor authentication, where a password is used in conjunction with another randomly created code, often sent by SMS or generated by an app.
他建議企業使用一種更安全的身份驗證系統，消費者使用雙重身份驗證——密碼與隨機建立的程式碼配合使用，後者通常由簡訊傳送或由應用生成。
Vince Steckler, chief executive of Avast, an antivirus software maker for consumers, says people become scared when they see thefts of individuals’ data from companies such as Target and Home Depot, the US retailers. But he adds they really need to worry about how much data they share voluntarily online.
防毒軟體製造商Avast執行長文斯施特克勒(Vince Steckler)說，當看到個人資訊被從美國零售商——如Target和家得寶(Home Depot)——那裡被竊取時，人們會感到害怕。但他補充說，人們真正需要擔心的是自己在網上自願分享了多少資料。
“Users probably give far more private information about themselves through their normal use of the internet —Facebook, WhatsApp, just about any kind of app on a phone or computer,” he says. “They give up a massive amount of personal information. The biggest threat to people’s privacy is just the legitimate stuff they are using.”
“使用者在日常使用網際網路（Facebook、WhatsApp等手機或電腦中的任何一款應用）時，提供的私人資訊可能還要多得多，”他說，“他們暴露了大量的個人資訊。對人們的隱私威脅最大的是他們使用的合法工具。”
Hackers often use publicly available data about people that is on the internet to “socially engineer” contacts, pretending to be someone users know or trust in order to get them to download an attachment or click on an infected link. Or they can use online information on friends and family members to answer the questions that might be used to access password codes.
黑客經常利用在網上可以公開獲得的個人數據來製造社交關係，假裝是使用者認識或者信任的某個人，為的是讓他們下載一個附件或者點選一個有病毒的連結。或者，他們可以利用一個人的朋友和家人的網上資訊回答可能被用於獲取密碼的問題。
“On a public profile, people have where they are born, what university they went to, who their family members are, what city they live in. All that information can be used to get more private pieces of information such as social security numbers, addresses and phone numbers,” Mr Steckler says.
“在公開簡介中，人們透露出自己的出生地、讀過的大學、家庭成員以及所居住的城市。所有這些資訊都可以被用於獲取更多的私人資訊，如社會保障號碼、家庭地址及電話號碼，”施特克勒說。
People should be aware of what information is available about them online and be suspicious when they receive emails from unknown senders. When clicking through to another site from an email, do not enter personal details as it could be a fake domain. Instead, search for the site on an independent search engine and log in from there.
人們應該瞭解，自己的哪些資訊在網上可以查到，並且在收到陌生人傳送的郵件時應保持懷疑態度。當從電子郵件中點選連結進入另一個網站時，不要輸入個人詳細資訊，因為該網站可能是一個假冒域名。你要做的是，在另一個獨立搜尋引擎上搜索該網站並從那裡登入。
Senior managers and executives in organisations may be even more at risk, cyber security experts warn, as hackers will presume they have good credit ratings or perhaps access to confidential work files while working remotely.
網路安全專家警告稱，組織中的高層管理人員可能面臨更大風險，因為黑客會推測他們有很好的信用評級，或者在遠端工作時可以訪問機密的工作檔案。
Tony Anscombe, head of free products at AVG, a security software maker, says consumers need to think about forgoing some convenience in return for better security. When shopping online, he recommends people use the option to check out as a guest to restrict the number of ecommerce sites that store their details.
網路安全軟體製造商AVG免費產品主管託尼褠斯科姆(Tony Anscombe)說，消費者需要考慮放棄一些便利，以換取更好的安全性。上網購物時，他建議人們使用訪客結賬的選項，以限制電子商務網站儲存他們詳細資訊的數量。
“One of the first things I suggest to anyone is you can type in your credit card details each time you make a purchase. It is only a 16 digit number, it is not too complicated,” he says.
“我對所有人的第一個建議是，每次網購，你都要輸入一次自己的信用卡資訊。只有16位數字，並不太複雜，”他說。
He adds that consumers should use different email addresses for different purposes, such as shopping and banking, so hackers cannot match an email stolen from an ecommerce website to one from a bank. Emails from more than one address can be directed to the same device, so this should not be too inconvenient, he says.
他補充說，針對不同的目的（如購物和辦理銀行業務），消費者應該使用不同的電子郵件地址，這樣黑客就無法利用從電商網站偷來的電郵去匹配從銀行竊取的電郵。可以從同一款裝置傳送多個不同地址的電郵，因此，這樣做應該不會太麻煩。
Other basic steps that Mr Anscombe recommends include checking your social media settings to make sure you know what you are sharing, turning off facial recognition so that you do not get tagged in photos without your permission and using different and complex passwords for each account.
安斯科姆建議的其他基本措施包括，檢查你的社交媒體設定，確保自己知道分享的內容；關掉面部識別功能，這樣你就不會在未經自己許可的情況下被在照片中標註出自己的名字；每個賬戶要使用不同且複雜的密碼。
“Every time you write something down that is personal, think: Who is storing it, where is it being stored and why am I sending it to them?” he says.
“你每次寫下涉及個人隱私的資訊，都要想一下：誰在儲存它，儲存在哪裡，我為什麼要傳送給他們？”他說。
